11 matches found
EUVD-1999-0841
Malware in sbrugna...
EUVD-2000-0055
Malware in sbrugna...
Solaris <= 7.0 chkperm Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/295/info Solaris 2.4, 2.5, and 2.5.1 possibly other versions have a package called FACE Framed Access Command Environment installed. Included in the package is a program called chkperm which checks a file to see if the us...
CVE-2000-0055
Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option...
CVE-1999-0860
Solaris chkperm vulnerability allows local users to read files owned by bin via the VMSYS environment variable and a symlink attack. The affected software is the Solaris chkperm utility; the vulnerability arises from a symlink-based access path involving VMSYS, leading to a partial confidentialit...
CVE-1999-0860
Solaris chkperm allows local users to read files owned by bin via the VMSYS environmental variable and a symlink attack...
CVE-2000-0055
CVE-2000-0055 describes a buffer overflow in the Solaris chkperm command that allows a local user to gain root privileges by supplying a long -n option. The vulnerability is local in scope with a high impact (confidentiality, integrity, and availability all listed as complete) and a CVSS base sco...
CVE-2000-0055
Buffer overflow in Solaris chkperm command allows local users to gain root access via a long -n option...
solaris.chkperm+arp.txt
Greetings, OVERVIEW /usr/vmsys/bin/chkperm and /usr/sbin/arp can be used to read bin-owned files. BACKGROUND All my testing was done on Solaris 2.7 and 2.6 SPARC edition. DETAILS Vuln 1 - chkperm This one isn't nearly as interesting as the instant-shell variety. Here's how it works: chkperm is...
Solaris 7.0 - 'chkperm' Local Privilege Escalation
source: https://www.securityfocus.com/bid/295/info Solaris 2.4, 2.5, and 2.5.1 possibly other versions have a package called FACE Framed Access Command Environment installed. Included in the package is a program called chkperm which checks a file to see if the user has permission to use the FACE...
Solaris 7.0 - chkperm Local Privilege Escalation
Solaris 7.0 - chkperm Local Privilege Escalation source: https://www.securityfocus.com/bid/295/info Solaris 2.4, 2.5, and 2.5.1 possibly other versions have a package called FACE Framed Access Command Environment installed. Included in the package is a program called chkperm which checks a file t...